Ralph Slooten
10430f7dce
Chore: Improve iframe height adjustment with optional chaining
2026-05-05 17:41:17 +12:00
Ralph Slooten
9dd1e99f52
Fixes for eslint validation
2026-03-29 17:40:43 +13:00
Ralph Slooten
dc9b8d54b7
Security: Add sandbox attribute to message iframe for extra later of security (already protected via CSP headers)
...
Note that this does not provide any additional security as such as the CSP headers do this, however it is another barrier when it comes to bypass attempts.
2026-03-28 08:01:51 +13:00
Ralph Slooten
9c2359eee5
Feature: Add filter functionality to message headers tab
...
This implementation is based on, and resolves, #626
2026-03-22 17:40:54 +13:00
Ralph Slooten
140633718c
Chore: Limit subject length to 100 characters in browser notifications
2026-03-10 11:31:21 +13:00
Ralph Slooten
3073ef9afe
Chore: Replace localStorage retrieval with a dedicated function for default release addresses
2026-03-10 11:20:33 +13:00
Ralph Slooten
804d49b7ca
Chore: Set margin & padding to HTML screenshot to prevent transparent top/left border
2026-03-10 11:09:28 +13:00
Ralph Slooten
7d29dff5e7
Security: Enhance HTML sanitization in screenshot generation
2026-03-10 10:24:40 +13:00
Ralph Slooten
bc8a737d4f
Chore: Simplify HTML decoding function in screenshot generation using DOMParser
2026-03-10 10:04:47 +13:00
Ralph Slooten
b99be839a0
Security: Enhance HTML sanitization in message view
2026-03-10 10:02:10 +13:00
Ralph Slooten
7bb330a07a
Chore: Use last release + git hash in Docker edge versions
2026-03-02 22:38:38 +13:00
Ralph Slooten
08ed46fc46
Use const instead of let
2026-02-21 22:43:51 +13:00
Ralph Slooten
c8caa29e24
Fix: Enable "Mark all read" button (Inbox) when new message is received
2026-02-09 15:38:11 +13:00
Ralph Slooten
e6fd638067
Detect if copy to clipboard is supported
2026-02-01 16:09:49 +13:00
Ralph Slooten
9b4ec97483
Minor UI tweaks
2026-02-01 15:44:13 +13:00
Ralph Slooten
dd74d46880
Feature: Option to display/hide attachment information in message view in web UI including checksums, content type & disposition
...
Resolves #625
2026-02-01 15:34:06 +13:00
Ralph Slooten
7cda4a36f1
Chore: Allow @ character in message tags & set max length to 100 characters per tag
2026-01-17 11:12:45 +13:00
Ralph Slooten
c5c9292863
More reliable handling for default release email editing
2026-01-10 15:56:19 +13:00
Ralph Slooten
877a9159ce
Delay bootstrap-tags init until after render
2026-01-08 16:23:24 +13:00
Ralph Slooten
c4582889ad
Update default release address wording
2026-01-08 16:20:00 +13:00
Ralph Slooten
f0160c0e29
Feature: Allow default mail addresses to be set when releasing message ( #594 )
2026-01-08 16:03:35 +13:00
Ralph Slooten
f9024d1f77
Chore: Remove webkit warnings about missing template / render functions
2026-01-08 16:03:34 +13:00
Ralph Slooten
3b9b470c09
Security: Restrict screenshot proxy to only support asset links contained in messages [CVE-2026-21859]( https://github.com/axllent/mailpit/security/advisories/GHSA-8v65-47jx-7mfr )
...
This fix prevents unrestricted network probing via the screenshot proxy by limiting requests to images, fonts and CSS links found within a message, and returns a generic HTTP error to the client when unsupported content types are requested, not found, or otherwise disallowed.
See CWE-918 Server-Side Request Forgery (SSRF)
2026-01-06 15:33:50 +13:00
Ralph Slooten
cde80bf0fd
Chore: Add tooltip to messages nav dropdown
2025-09-29 17:07:40 +13:00
Ralph Slooten
e2314fb3b9
Chore: UI tweaks to pagination layout for clearer navigation ( #568 )
2025-09-26 14:48:51 +12:00
Ralph Slooten
cce21854b9
Chore: Refactor JS functions and remove unused parameters
2025-07-24 17:27:11 +12:00
Ralph Slooten
75504c7bba
Fix: Support angle brackets for text/plain URLs with spaces ( #535 )
2025-07-18 23:43:05 +12:00
Ralph Slooten
2d1fb7cf14
Chore: Allow unknown href link protocols in HTML view such as myapp:// ( #532 )
2025-07-01 08:01:09 +12:00
Ralph Slooten
3fff79e29f
Chore: Apply linting to all JavaScript/Vue files with eslint & prettier
2025-06-20 23:26:06 +12:00
Ben Edmunds
95e3ef6fca
Feature: Allow version checking to be disabled ( #524 )
2025-06-19 22:29:20 +12:00
Ralph Slooten
4b5ce0afed
Feature: Store username with messages, auto-tag, and UI display ( #521 )
2025-06-18 16:41:04 +12:00
Ralph Slooten
fed20de522
Feature: Add relay config to preserve (keep) original Message-IDs when relaying messages ( #515 )
2025-06-07 11:38:25 +12:00
Ralph Slooten
a1c2690c44
Use text-muted instead of text-secondary
2025-05-18 10:31:39 +12:00
Ralph Slooten
d0716b4995
Feature: Add option to hide the "Delete all" button in web UI ( #495 )
2025-05-17 12:28:35 +12:00
Matt Currie
05375fed7a
Feature: Display unread count in app badge ( #485 )
...
* Display unread count in app badge
* Rate limit app badge updates
2025-04-30 17:34:46 +12:00
Ralph Slooten
1400936760
Feature: Add ability to mark all search results as read ( #476 )
2025-04-06 18:11:37 +12:00
Ralph Slooten
39886cf57c
Fix: Prevent cropping bottom of label characters in web UI ( #457 )
2025-03-08 22:49:07 +13:00
Ralph Slooten
9a1f3a6bb5
Chore: Replace PrismJS with highlight.js for HTML syntax highlighting
2025-03-05 17:14:06 +13:00
Ralph Slooten
86b5524217
Feature: Add optional UI setting to skip "Delete all" & "Mark all read" confirmation dialogs( #428 )
2025-02-02 15:31:18 +13:00
Ralph Slooten
e2fab49873
Update relay modal wording
2025-01-26 09:48:05 +13:00
Ralph Slooten
a95bc3d29f
Feature: Option to override the From email address in SMTP relay configuration ( #414 )
2025-01-26 00:22:57 +13:00
Ralph Slooten
4d86297169
Feature: Add Chaos functionality to test integration handling of SMTP error responses ( #402 , #110 , #144 & #268 )
...
Closes #405
2025-01-25 12:17:15 +13:00
Ralph Slooten
4c954e655c
Chore: Display "To" details in mobile messages list
2024-12-10 22:00:36 +13:00
Ralph Slooten
f08a959545
Bugfix: Fix external CSS stylesheet loading in HTML preview ( #388 )
2024-11-17 17:49:15 +13:00
Ralph Slooten
1afd138cc5
Chore: Minor UI tweaks
2024-11-16 15:21:45 +13:00
Ralph Slooten
d448211653
Fix: Fix browser notification request on Edge ( #89 )
2024-11-07 16:35:37 +13:00
Ralph Slooten
47c6062b1c
Chore: Separate attachments and inline images in download nav and badges ( #379 )
2024-10-26 23:14:55 +13:00
Ralph Slooten
e4da814ece
Use consistent @click syntax
2024-10-24 23:27:26 +13:00
Tobi
324a0ac037
Fix: Allow multiple item selection on macOS with Cmd-click ( #378 )
...
* UI: Make multiple tag selection work on macOS
* UI: Allow click+meta key combination to select messages in list
2024-10-24 23:22:48 +13:00
Ralph Slooten
56f1138f8e
Chore: Use consistent margins for Mailpit label if set
2024-09-07 17:34:42 +12:00
